This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File:                     p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier:          JWG17a3udfT3BLrD5FefPJJVT4xHPCD3inkOKIHll+M=
Subject key identifier:   48:4E:40:49:8C:BD:60:AE:7D:AE:45:22:B1:65:F7:11:6C:7F:FA:A1
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer:       /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial:       019C4C92E5C0D5DE519FFF0BD9B030232F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number:          183F
Signing time:             Wed 11 Feb 2026 12:00:21 +0000
Manifest this update:     Wed 11 Feb 2026 12:00:21 +0000
Manifest next update:     Thu 12 Feb 2026 12:00:21 +0000
Files and hashes:         1: 7RRyo5mrSZHKaCfweZimJC0UI0A.roa (hash: LQwFNkqaemk7BQFWfMSkrEO4PRaAlztizBh/5pehkzc=)
                          2: bXeDjlFQZxCvvfoeElvquanHuZA.roa (hash: RDVCaZsRUDJaMXpntgU8V0AZhyelN+TpLVWyUrhvuTY=)
                          3: bc0mGww2GImeLw53tIRJtqt1goo.asa (hash: sLme9hQtgnCHpEldpCRLHVOEKrZFO2bAZpniqL80jV4=)
                          4: cduC2GbU6mLXIEEHAt29JqjeJ_c.roa (hash: sBtHQn0mqBf5vLWH/WxAyxQgtkjINRc/CcTzUpuSllU=)
                          5: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: xGFrIMTu2dVvLUrhNnByLuKn14ZNx6etucVMx0abR8A=)
                          6: pkUUzqA3QbThc7oqdUnjxN9QYMU.roa (hash: RswzhGW9W7Aa5lMfftJP3fP15HlpGxcfnXUCf1iUSNg=)
                          7: uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa (hash: EQLCZ4pDh+GlnlGdR0v0R9xaKh+vfEuApMYZeBAUdys=)
                          8: zOPM5DQVOuL2gxGFfQ2OogcDlag.roa (hash: TZhWdIY554lkmlZSQhc2076I8ib8niBs3eBXmmFEKfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4c:92:e5:c0:d5:de:51:9f:ff:0b:d9:b0:30:23:2f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
        Validity
            Not Before: Feb 11 12:00:21 2026 GMT
            Not After : Feb 12 12:00:21 2026 GMT
        Subject: CN=484e40498cbd60ae7dae4522b165f7116c7ffaa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:a0:2d:56:6a:4c:49:b7:22:a8:bc:68:38:
                    87:8e:7f:9b:bb:2a:dc:30:1a:53:43:2a:fa:cb:60:
                    94:46:49:c0:60:b0:8d:94:37:be:75:cb:37:b2:de:
                    7f:fc:21:f8:a4:34:be:44:ab:b6:c6:57:1f:e0:14:
                    6f:58:04:56:f5:ca:7d:ea:73:ba:21:b8:88:63:7f:
                    0e:d6:a0:00:8d:40:a4:b6:a9:a6:51:a7:2e:b3:bd:
                    8f:08:fa:75:0d:22:30:1e:5b:dd:ed:66:a3:8a:24:
                    c0:18:33:9e:e4:31:18:4a:4f:7c:27:b9:35:53:d7:
                    5c:78:71:00:50:a5:41:1b:5a:52:3e:31:c6:dd:20:
                    7e:cc:80:58:c6:62:1d:2b:2d:8f:d8:0f:99:93:d3:
                    9d:29:1b:33:8f:37:d8:8b:8a:91:86:91:33:c4:73:
                    05:7e:3e:da:13:c5:b1:5e:97:22:f9:cf:4f:47:0c:
                    23:e5:b0:49:62:78:2b:d5:f1:e9:c7:60:f9:25:1a:
                    24:91:8c:4b:cd:fe:b4:04:10:37:97:25:3c:0f:e3:
                    ad:06:b3:d9:7a:16:7c:8e:3a:c7:9a:c7:f2:37:a1:
                    55:75:38:6e:ac:0c:58:4d:a5:de:8b:6f:27:85:45:
                    8e:e3:9c:0e:8f:28:c7:54:d3:3f:47:2b:7b:bd:1c:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4E:40:49:8C:BD:60:AE:7D:AE:45:22:B1:65:F7:11:6C:7F:FA:A1
            X509v3 Authority Key Identifier:
                keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fa:97:23:d5:30:4d:ba:0c:fa:5f:64:e2:bd:ab:1e:0e:96:
         8a:5b:f5:8f:99:91:c7:8b:07:d2:e5:0b:24:42:fd:bc:8c:88:
         92:08:24:0d:f1:74:50:46:6b:07:97:99:99:ce:bc:79:c5:ed:
         0c:92:d1:f7:a8:db:ef:59:ba:5e:b2:cd:b4:b6:94:0e:08:6d:
         3d:34:73:c2:5f:4d:d9:28:d5:66:f7:72:07:57:ac:b9:d5:21:
         ab:77:59:51:46:46:19:e0:de:76:f5:2f:3e:c8:d2:b5:1f:15:
         4e:0d:e8:5b:55:5d:55:62:df:9b:9f:d3:6f:a1:0f:d2:c5:b5:
         98:5f:93:e7:ad:88:7a:5b:99:1e:ac:62:0e:cb:7e:12:d7:42:
         31:87:86:b1:b5:71:a9:e6:5a:72:38:9a:8b:8a:a5:30:76:fb:
         da:6f:cf:e0:23:98:c5:38:2e:e0:c2:d5:91:cc:6d:0f:c4:8d:
         38:00:60:9b:13:33:43:6a:b7:60:83:8b:be:e9:23:de:7c:8b:
         d1:56:f6:b4:75:5c:f0:47:2d:76:b1:cc:35:80:7f:57:e8:23:
         7e:75:a9:79:dd:cc:ba:37:a1:fa:0f:7f:93:a1:2a:2e:bb:74:
         d7:e2:25:45:98:ed:dd:e8:14:15:ba:31:8b:2f:c2:af:aa:d8:
         fe:4a:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 19:20:56 2026 by rpki-client